Watchful Eye
|
Description:
|
Keylogger
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Tuesday, July 10, 2007
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Keyloggers invisibly monitor and record all of your computer activity. This information is then automatically emailed to an anonymous user.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "Watchful Eye"
Threat Info
View All
Detecting items list:
- Files by Name
%PROGRAMFILES%\Watchful Eye 4.9\riched32.dll
%PROGRAMFILES%\Watchful Eye 4.9\UninstallWE.exe
%PROGRAMFILES%\Watchful Eye 4.9\WE.exe
%PROGRAMFILES%\Watchful Eye 4.9\zsdde.dll
%PROGRAMFILES%\Watchful Eye 4.9\zshook.dll
%PROGRAMFILES%\Watchful Eye 4.9\zssendmail.dll
%START_PROGRAMS%\Zemerick Software\Watchful Eye\Stealth Operation Readme.lnk
%START_PROGRAMS%\Zemerick Software\Watchful Eye\Uninstall.lnk
%START_PROGRAMS%\Zemerick Software\Watchful Eye\Watchful Eye.lnk
%START_PROGRAMS%\Zemerick Software\Watchful Eye\ZS Home Page.lnk
%APPDATA%\Microsoft\Installer\{2F05CC95-9857-49F0-91DD-8A9E324D36C1}\_26c2170b.exe
%APPDATA%\Microsoft\Installer\{2F05CC95-9857-49F0-91DD-8A9E324D36C1}\_33b42215.exe
%APPDATA%\Microsoft\Installer\{2F05CC95-9857-49F0-91DD-8A9E324D36C1}\_62c8404a.exe
%APPDATA%\Microsoft\Installer\{2F05CC95-9857-49F0-91DD-8A9E324D36C1}\_77c5642d.exe
- Files by Directories
%PROGRAMFILES%\Watchful Eye 4.9 %START_PROGRAMS%\Zemerick Software\Watchful Eye
- Files by CLSID or Name
CLSID=9E011A6E-7F87-49D1-B74A-905ADA29B30B
- Registry Keys
HKCR\ZSSendMail.clsSendMail
HKCU\Software\Zemerick Software Inc.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Zemerick Software\Watchful Eye
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F05CC95-9857-49F0-91DD-8A9E324D36C1}
«
Go to Software Database